rspamd die after ispconfig update

ls -la /var/log/rspamd/
totalt 108
drwxr-x--- 2 _rspamd _rspamd 4096 sep 11 09:12 .
drwxr-xr-x 17 root root 12288 sep 11 09:26 ..
-rw-r--r-- 1 _rspamd _rspamd 90700 sep 11 09:18 rspamd.log

 

rspamadm configtest
CPU doesn't have SSSE3 instructions set required for hyperscan, disable it
cannot parse ip:
symbol 'RAMBLER_EMAILBL' has its score defined but there is no corresponding rule registered
symbol 'R_DUMMY' has its score defined but there is no corresponding rule registered
symbol 'RAMBLER_URIBL' has its score defined but there is no corresponding rule registered
syntax OK

 

ls -la /etc/rspamd/local.d/
totalt 80
drwxr-xr-x 3 root root 4096 sep 11 10:10 .
drwxr-xr-x 6 root root 4096 sep 11 09:12 ..
-rw-r--r-- 1 root root 1411 sep 11 09:17 antivirus.conf
-rw-r--r-- 1 root root 262 sep 11 09:17 antivirus_group.conf
-rw-r--r-- 1 root root 64 sep 11 09:17 classifier-bayes.conf
-rw-r--r-- 1 root root 581 sep 11 09:17 dkim_domains.map
-rw-r--r-- 1 root root 221 sep 11 09:17 dkim_selectors.map
-rw-r--r-- 1 root root 129 sep 11 09:17 dkim_signing.conf
-rw-r--r-- 1 root root 27 sep 11 09:17 greylist.conf
-rw-r--r-- 1 root root 205 sep 11 09:17 groups.conf
-rw-r--r-- 1 root root 56 sep 11 09:13 history_redis.conf
-rw-r--r-- 1 root root 116 sep 11 09:17 milter_headers.conf
-rw-r--r-- 1 root root 210 sep 11 09:17 mx_check.conf
-rw-r--r-- 1 root root 608 sep 11 09:17 neural.conf
-rw-r--r-- 1 root root 452 sep 11 09:17 neural_group.conf
-rw-r--r-- 1 root root 78 sep 11 09:17 options.inc
-rw-r--r-- 1 root root 22 sep 11 09:17 redis.conf
drwxr-xr-x 2 root root 4096 sep 11 10:25 users
-rw-r--r-- 1 root root 847 sep 11 09:17 users.conf
-rw------- 1 root root 178 sep 11 09:17 worker-controller.inc

 

I did according to guide, what do you mean with "unmask" ?

 

Success:
2019-09-11 11:49:45 #27986(controller) <c9hxbz>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'network error' for zen.spamhaus.org while 'no records with this name' was expected when querying for '1.0.0.127.zen.spamhaus.org'(likely DNS spoofing or BL internal issues)
^C

The ispconfig update messed with read access here:
-rw------- 1 root root 178 sep 11 09:17 worker-controller.inc
Should be:
-rw-r--r-- 1 root root 178 sep 11 09:17 worker-controller.inc

 

So for others that find this, do this:
chmod 644 /etc/rspamd/local.d/worker-controller.inc

 

I did not change this manually, this is servers that was installed some debian ago according to the howtoforge.
Probably some other upgrade or software must have changed this then.
# umask
0022
Other server that worked :
# umask
0022

 

Cant find anything umask by searching in /etc/php/7.0/cgi/php.ini
Nor in cli

 

Ok, i will do rest of servers and report if i find anything useful.
The options.inc does set 127.0.0.1 as nameserver ?
That is not correct in an multiserver setup ?
Should be my internal DNS-server for public lockups ?
Edit: or i maybe install a caching DNS locally anyway, like unbound or other.

 

On another Debian 10, ispconfig did not find rspamd when reconfiguring services.
It was already updated to 3.1.15 when i started.
What to look for here ?

Reconfigure Services? (yes,no,selected) [yes]:

Configuring Postfix
Configuring Dovecot
Configuring Spamassassin
Configuring Amavisd
Configuring Getmail
Configuring Pureftpd
Configuring Apache
Configuring vlogger
Configuring Apps vhost
Configuring Jailkit
Configuring Ubuntu Firewall
Configuring Database
Updating ISPConfig

 

sorry but i made a misstake, the file ISPConfig-3-stable.tar.gz was downloaded before, so installed an old version, sigh.
Cant talk in phone and work at the same time ;-)